Redundant Computing Instance Grouping for Railway Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge in achieving functional safety in railway technology with high Safety Integrity Levels (SIL) is the significant computational effort required for synchronizing and comparing results across redundant computing instances, especially when using commercial off-the-shelf hardware, leading to increased response times and potential delays.
Innovation Solution
A method and computing environment that groups computing instances into processing units, allowing asynchronous internal message exchange and a single subsequent comparison of external messages, eliminating the need for internal message voting and reducing the number of comparisons, thereby optimizing computational effort.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strict synchronization and comparison of all messages between redundant computing instances is performed, then functional safety is ensured, but computational overhead and response times increase significantly
Solution Approach 1:
The patent segments the system into processing units, where each unit processes messages independently without requiring synchronization with other units. Only the final results from each processing unit are compared, rather than comparing every intermediate message exchange. This segmentation reduces the computational overhead of synchronization while maintaining functional safety through result comparison.
Solution Approach 2:
The patent extracts the voting/comparison operation from the internal message processing flow. Instead of comparing every message between redundant instances, only the final output messages are subjected to voting. This extraction eliminates unnecessary comparison operations during intermediate processing steps, significantly reducing computational overhead while preserving safety through final result verification.
2Reliability
If all messages between computing instances are compared through voting, then message integrity is ensured, but the number of comparisons and computational effort increase
Solution Approach 1:
The patent segments message processing into independent processing units, where internal messages are processed without external comparison. Only the output of each processing unit is subjected to voting. This segmentation dramatically reduces the number of comparisons required while maintaining integrity verification at the appropriate boundary levels.
Solution Approach 2:
The patent extracts the voting mechanism from the internal message exchange process and applies it only to final output messages. This extraction eliminates the computational complexity of comparing every intermediate message while preserving integrity through targeted comparison of final results, which is sufficient for functional safety.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention comprises a method for the computer-aided execution of a technical process in which application programs are executed in a redundancy group (GR) consisting of a plurality N of redundant computing instances (RP), thereby calculating the plurality N of redundant results. Subsequently, a comparison of the plurality N of messages containing the results is performed during a voting process. If a majority of the messages contain identical results, said majority of messages is used for the further execution of the technical process. Processing units (VE1 ... VE3) are provided in said plurality N. In each of these processing units (VE1 ... VE3), several different computing instances (RP) are combined, wherein none of these processing units (VE1 ... VE3) contains multiple computing instances (RP) from one and the same redundancy group (GR).The resulting set N of redundant messages is compared during voting if these messages are to be sent as external messages to computing instances (RP) that do not belong to the processing units (VE1 ... VE3) in which the message was generated. No voting takes place for messages exchanged internally between computing instances (RP) within a processing unit (VE1 ... VE3). Furthermore, a computer program and a storage medium are included.